HackingRetailData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Citi Trends, Inc.
bd_fa877ef62e48ea9d · schema v1 · pii pii-v1
Full breach record for Citi Trends, Inc. →Citi Trends, Inc. reported a data breach to the Maine Attorney General affecting 285 Maine residents. The breach occurred on January 14, 2023, and was discovered on June 13, 2023. The incident involved an external system breach (hacking) resulting in the acquisition of names and Social Security Numbers. Citi Trends provided written notification and offered one year of identity theft protection services.
Maine clockDiscovered Jun 13, 2023 → Filed with AG Jun 23, 202310d ✓ ME AG ≤30d10 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed285 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/07c5c0b1-c0bc-4579-bfb6-697b4bfd4e4b.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 23, 2023
- Raw hash
- e677f82e0a90026d2ec88cd17d83abe1c48125bf1d6d63b0e06870cd503318b5
Reporting entity
- Name
- Citi Trends, Inc.norm: citi trends
- Domain
- cititrends.com
Victim entity
- Name
- Citi Trends, Inc.norm: citi trends
- Domain
- cititrends.com
Incident
- Discovered
- Jun 13, 2023
- Materiality determined
- —
- Notification sent
- Jun 22, 2023
- Affected individuals
- 285
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 10 days(10 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 10d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 13, 2023→ Filed with AG: Jun 23, 202310d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.